Resubmissions

03/09/2024, 07:44

240903-jk2xqasdqe 4

03/09/2024, 07:38

240903-jgrycasdkf 4

General

  • Target

    74e5e9b1-7a0f-4849-262b-08dcb5d506ca.pdf

  • Size

    44KB

  • MD5

    0ae9ec1fb306e0a4c09d1b23e40f8150

  • SHA1

    e5d83147abd28b10199f2245041527a19f07e1ae

  • SHA256

    e35fce4eea24d52ec62300dba9475f3d55d18900ee07bb152ee7a66fa72a8905

  • SHA512

    87409d33e467ebebe1140662c7083108e7764dc24911331b989be47353cff699c4bfb7009b6e5f884419e1d018bb80baa7a0962689e9c39b1f8d05990d4417c7

  • SSDEEP

    768:B8z9B13RdfcAlKNK04Nq3pU0hVa45ArCbcjra7/rjIcfhTB+85RXWIyQ1pvdo:B8z9BNf/q3pDa0gajvZXWBQfvdo

Score
4/10

Malware Config

Signatures

  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • 74e5e9b1-7a0f-4849-262b-08dcb5d506ca.pdf
    .pdf
    • http://wmd.god21.net/ViewSwitcher/SwitchView?mobile=False&returnUrl=https://alch.servicesending.com/OgBHr?e=aW52ZXN0b3JyZWxhdGlvbi5waGVAcGVydGFtaW5hLmNvbQ==

    • https://community.docusign.com/signing-7

    • https://protect.docusign.net/report-abuse?e=AUtomjpFak9GlbPL0zFFi138DQ5sHhGKT0Yhgt62kFT9wxcaHF-gBx7W3OPyzdxSybRhrS7Q26U_lOYrEsp7iXQC5QVxNz6D0Vj6Mo4csmKYgsYkUMytHohLC_JqTtmepAxJnozrWmZE1ZiQi-SBrfvaFtXweKB343FwSi96wzLN4boMgYs-JYZQOZQut6F1JMl5PcDNYzIG7V6wAJ9cVp1t42m5JJ8QwdcCEbK9J3SvxjNrFyNqTkTpk8YZqTY9gXil1-wA-QW1oBaeNyRV2bhSl3vItGSNp9WKFe3OcAIi4B45VJ6LThjdR0eBzWqMGREZpOWMIIKGdgWDCHHnxpdMDlqu2JzrIyi0wXcpUBnRfWoYLhsJTav3lujsqsnAWGDKM_yAcrjYGj71EyOCq4nW-cyRkJp-WLIsC12Sb5szFZUyoAAhUmwymsBschK13cV71hQKwKp_pXiNVizKa1k&lang=en

    • https://support.docusign.com/

    • https://support.docusign.com/en/articles/How-do-I-manage-my-email-notifications

    • https://support.docusign.com/en/guides/Declining-to-sign-DocuSign-Signer-Guide

    • https://support.docusign.com/s/articles/How-do-I-sign-a-DocuSign-document-Basic-Signing?language=en_US&utm_campaign=GBL_XX_DBU_UPS_2211_SignNotificationEmailFooter&utm_medium=product&utm_source=postsend

    • https://www.docusign.com/features-and-benefits/mobile?utm_campaign=GBL_XX_DBU_UPS_2211_SignNotificationEmailFooter&utm_medium=product&utm_source=postsend